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ON SKEW POLYNOMIAL CODES AND LATTICES FROM 
QUOTIENTS OF CYCLIC DIVISION ALGEBRAS 

JEROME DUCOAT AND FREDERIQUE OGGIER 


Abstract. We propose a variation of Construction A of lattices from linear 
codes defined using the quotient A/p A of some order A inside a cyclic division 
F-algebra, for p a prime ideal of a number field F. To obtain codes over this 
quotient, we first give an isomorphism between A/pA and a ring of skew poly¬ 
nomials. We then discuss definitions and basic properties of skew polynomial 
codes, which are needed for Construction A, but also explore further proper¬ 
ties of the dual of such codes. We conclude by providing an application to 
space-time coding, which is the original motivation to consider cyclic division 
F-algebras as a starting point for this variation of Construction A. 


1. Introduction 

Connections between Euclidean lattices and linear codes over finite alphabets 
have been classically studied, through a series of constructions referred to as Con¬ 
structions A,B,C,D or E [1]. Given the finite field F 2 , the original (binary) Construc¬ 
tion A [2] considers the map p : —>■ of reduction modulo 2 componentwise, 

for N some positive integer. If C is a binary linear code of length N, then p~^{C) 
(or its normalized version -^p~^(C)) is a lattice. A series of duality follows, such 
as a correspondence between the dual code C-*- of C and the dual lattice L* of L, 
self-dual codes and unimodular lattices, or between the weight enumerator of the 
code C and the theta series of the lattice L. Construction A has been generalized in 
many ways, including, for citing a few examples, to: (1) cyclotomic fields Q(Cp) [3], 
where (p is a primitive pth root of unity, and p is prime, in which case p becomes 
the componentwise reduction modulo the prime ideal (1 — ^p) of a vector with coeffi¬ 
cients in the ring of integers Z[(p], (2) to quadratic and imaginary fields and totally 
definite quaternion algebras over Q as a way to construct modular lattices in [4], 
(3) to the construction of unimodular lattices using quaternary quadratic residue 
codes [5]. 

Construction A is also of interest from a communication point of view, since it 
provides a concrete way of doing coset coding [2], an encoding technique which is 
very useful to encode lattices, since it provides a natural way of mapping elements 
from finite alphabets (codewords) to real or complex symbols (lattice points). 

This paper addresses a variation of Construction A in the context of division 
algebras, and cyclic division algebras over a cyclic number field extension KjF in 
particular. Denote hy Op and Ok their respective rings of integers, and by a the 
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generator of the Galois group of K/F. Instead of using as a starting point the 
quotient of a number field by an ideal (as in [3] for example), we consider a specific 
OF-order A in a cyclic division f-algebra, and the quotient A/p A for p a prime 
ideal of Of- 

As shown in Section 2, the quotient A/pA turns out to be isomorphic to the 
ring of skew polynomials {Ok! pO k)[x] ~ where u is determined by the 

choice of the cyclic division A’-algebra. To mimic the steps involved in Construction 
A, we next consider the problem of designing codes over {OkIpOk)[x\ cr]/(a;” — u) 
in Section 3, where a variation of Construction A is given. Let denote the 
finite field with q elements, q a prime power. Codes over the skew polynomial ring 
Fg[x;cr]/(/(x)), for (/(x)) a two sided ideal of Fq[x;tT], were introduced in [6] and 
furthermore studied in the context of cyclic codes in [7] . A generalization to Galois 
rings was obtained in [8] . We propose some basic definitions and properties of codes 
over the skew polynomial ring (Ok jpO k)\x\ ct]/(x” — u), by taking inspiration from 
[8] and generalizing some of the known results for the ring Fq[x;o-]/(x" — m). We 
note that our results could be easily generalized to the case {Ok/pOk)[x] cr]/(/(x)), 
which is not done in this paper because of our focus on cyclic division algebras. 

Once equipped with suitable definitions for skew polynomial codes over the ring 
{OkIpOk)[x\(t]/{x'^ — u), it is natural to wonder about the dual of such codes. 
This is studied in Section 4. 

We conclude by going back to the original motivation to consider this variation 
of Construction A over a cyclic division T’-algebra, namely its application to space- 
time coding, or more precisely, to derive a way to perform coset encoding, as detailed 
in Section 5. 


2. Quotients of Cyclic Division Algebras 

Let K/F be a number field extension of degree n with cyclic Galois group (cr), 
and respective rings of integers Ok and Op- Consider the cyclic F-algebra A defined 
by 

AT© ATe 0 • • • ATe””^ 

where = u G F, and ek = a{k)e for k G K. We assume that rt*, i = 0,..., n — 1, 
are not norms in K/F so that the algebra is division. 

For S a Noetherian integral domain with quotient field A, and A a finite dimen¬ 
sional A-algebra, an S'-order in A is a subring A of A, having the same identity as 
A, and such that A is a finitely generated module over S and generates A as a linear 
space over F. An order A is called maximal if it is not properly contained in any 
other A-order. 

Then 

A = Of © Oice © • • • © 

is an OF-order of A, which is typically not maximal. 

Let p be a prime ideal of Of so that pA is a two-sided ideal of A, and Op/pOp 
is the finite field F^/ , where p is the prime number lying below p and / is the 
inertial degree of p above p. Since A is an OF-module, we have the following ring 
homomorphism : 

Op ^ A/pA 

and the image of p = pA fl Of obviously lies in pA. Hence, it yields a ring homo¬ 
morphism Fp/ = Of/p —> A/pA, which means that A/pA is an Fp/-algebra. 


SKEW POLYNOMIAL CODES FROM QUOTIENTS OF DIVISION ALGEBRAS 


3 


From [9], we have the following F^/-algebra isomorphism : 

A/pA ~ (PkI^Ok) 0 {OkI^OkY © • • • 0 (OK/pOK)e”-\ 

where e{k -(- pOk) = (o'(fc) © pOk)^ for all k G Ok and e" = u + p. 

Indeed, since p is a prime ideal of Op and (J\f = Mf, we have a{pOK) C pOx, 
which means that a can be factorized as a ring homomorphism by the natural 
projection tt : Ok Ok/pOk '■ more explicitely, there exists a ring homomorphism 
CT : Ok/pOk —>■ OkIpOk such that a = a o tt. By a slight abuse of notation, we 
keep the notation a for the map W. 

Since Ok is a Dedekind domain, pOk = Pi^p 2 ^ • • • p/ with pi a prime ideal of 
Ok and Ci > 0 for i = 1,..., g. 

In the particular case where p is inert in K/F, pOk is a prime ideal of Ok- Then 
the finite ring Ok/pOk is an integral domain, so it is the finite field Fpn/. The 
induced ring homomorphism cr : F^n/ = Ok/pOk —>■ Ok/pOk = IFp"/ is thus a 
generator of the cyclic Galois group of Fpr./ /F^/. 

Given a ring S with a group G = (tr) acting on it, the skew polynomial ring 
tr] is the set of all polynomials sq + six + ... + Si € S, m > 0 with 

multiplication twisted by the relation xs = a{s)x for all s G S. 

We will consider the skew polynomial ring {OkIpOk)\x\<j\. Note that since 
u G F, x^ — u belongs to the center of {Ok/ pO k)[x] <j\ and the ideal (x" — u) is 
two-sided. 

Lemma 2.1. There is an ¥pf -algebra isomorphism between A/pA and the quotient 
of [OK/pO k)[x] O'] by the two-sided ideal generated by x" — u. 

Proof. We define the map 

ip : {Ok/pOk)[x',o] A/p A 
/(x) /(e). 

Using the isomorphism given above and in [9], it is easily seen that is a surjective 
Fp/-algebra homomorphism. Moreover, the kernel of (p is the two-sided ideal of 
{OK!pO k)[x't o] generated by x” — u. Indeed, it is easily seen that x" — u lies in 
ker((p)). Gonversely, let /(x) G ker((/7). We write 

m 

f{x) = ^s^x\ s^ G OkIpOk, i = 0,m. 

i^O 

Then /(e) = 0 in A/pA. The ring {Ok/ pO k)[x't o] is not always right or left 
Euclidean, as it would be if Ok/pOk were a finite field. However, since x" — u 
is a monic polynomial (or more precisely since its leading coefficient is a unit in 
Ok/pOk), we can still perform the long division algorithm: indeed, if m > n, we 
may perform a right division of /(x) by x” — u as follows. Note that the polynomial 

771—1 

/(X) - SmX^-^{x^ - «) = E + Sn.Ux'^-^ 

i=0 

has degree smaller than that of /. This procedure of subtracting left multiple of 
x" — It can be repeated until we obtain a polynomial of degree smaller than n, thus, 
there exist some polynomials g{x) and h{x) such that 

/(x) = g(x)(x” - u) 0 h{x) 

where h{x) has degree < n — 1. Hence, /(e) = 0 is equivalent to h{e) = 0. Yet, 
0 = h{e) = ro 0 Tie -I-h in A/pA ~ {Ok/pOk) 0 {Ok/pOk)^ 0 • • • © 
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{Ok /pOK)e'^~^ ■ Therefore, tq = ri = ■ ■ ■ = rn-i = 0 and h{x) = 0. We conclude 
that f{x) is a (left) multiple of x" — u. Consequently, ker((^) = (x" — u) and we get 
the desired isomorphism. □ 

This lemma generalizes the isomorphism of [10, Lemma 1] for p inert. 

Denote by ^|J the inverse isomorphism of the one given in Lemma 2.1: 

'll; : A/pA = (C>/f/pC>if)[x; cr]/(x” - u). 

Let I be a left ideal of A. Assume that IdOp A p. Thenl/pA is an ideal of A/pA. 
In the sequel, we will study the left ideal tjj{I/pA) of {OkI‘pOk)\x\(j\I{ x^ — u). 

3. Skew-Polynomial Codes and a Variation of Construction A 

Classical cyclic codes over the finite field Fg are ideals of the polynomial ring 
Fg[x]/(x" — 1). Since this is a principal ideal domain, every ideal has a generator 
polynomial, which in turn defines a cyclic code, and codewords are then multiples of 
this generator polynomial. In [6], the definition of codes over polynomial rings was 
extended to that of codes over the skew-polynomial rings F, [x; a]. We are interested 
here in codes over the skew-polynomial rings {O k /'pO k)[x] cr]/ (x" — u). 


3.1. Division in Skew-Polynomial Rings. A first major difference between 
Fg[x;cr] and {Ok/ pO k)[x\ <j\ is, as noted in the proof of Lemma 2.1, that the skew 
polynomial ring {Ok/ pO k){x] u] is not in general right or left Euclidean anymore. 
However, this can be sorted out, using the same technique as that explained in [8], 
which was also used for the proof of Lemma 2.1. 

m I 

Let /(x) = ^SiX® and g{x) = '^tiX^ be two polynomials of respective degree m 

i—0 i—0 

and Z, with coefficients in {Ok/pOk)- Suppose that ti is invertible and m> I, then 
a right (respectively left) division of /(x) by g{x) is obtained as follows: consider 
the polynomial 


fix) 


1 — 1 


fTn—l 


iiiY 


gix) 


respectively 

fix) - gix)a~'- X™"' 


Since cr is an automorphism, 1 = cr{tit^ ^) = a{ti)a{ti ^), which implies that cr{ti) 
is invertible. Hence, a^U) also is invertible for all 1 < j < m. Moreover, we have 


/(^) - = /(^) - SmX<j"^-^-\tYYx^-^gix) = ■■■ 

= f{x) - s™x™-V"®-'-("®-')(tr')5(x) 

1-1 

= f{x) - 

i^O 

1-1 

= f{x) - SmX^ + 

2=0 
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Similarly, we have 


fix) - gix)a- 


-M \ 


■' = fix) - Y^ti 


2=0 




= fix) - * 


2=1 


I -m 


2 —Z 


= fix) - 

= fix) - s^x^ - (t) 

2=0 ^ ^ ^ 

Hence, both polynomials fix) — g{x) and fix) — gix)a~’‘ 

have degree < m. Therefore this procedure can be iterated, to find polynomials 

g(x),r(x) such that 

fix) = qix)gix) + r{x), resp. f{x) = gix)q{x) + r{x), deg{r{x)) < deg{g{x)). 

If r{x) = 0, we say that gix) is a right, resp. left, divisor of fix). 

We next discuss the unicity of the remainder of this division. Suppose 

fix) = qiix)gix) + ri{x) = q 2 ix)gix) + r 2 (x) 

then iqiix) — q 2 ix))g{x) = r 2 (x) — ri{x). Suppose that gi(x) — q 2 ix) is not zero, 
then the degree of iqiix) — q 2 ix))g{x) is greater than deg(g(a;)), while the degree 
of r 2 ix) — ri{x) is less than deg(g(a;)), therefore qi(ic) = q 2 ix) and ri(a;) = r 2 (x). 
The proof for left division is done similarly. 


3.2. Principal Ideals and Codes. Thanks to the unicity of the remainder, the 
skew polynomials of degree less than n are canonical representatives of the elements 
of iOK/pOK)[x-, cr]/(x” - u). 

Lemma 3.1. Any right divisor g(x) of x'^ — u generates a left principal ideal 
igix))/ix^ — u) of {Ok/pOk)[x\(j\/ ix^ — u). The set of left multiples of g{x) 
by skew polynomials of degree k = n — deg(g(a;)) are canonical representatives of 
the elements of (g(x))/(x"' — u). 

Proof. For any right divisor g{x) of cc" — u, the ideal (x" — u) is contained in 
{g{x)). By the correspondence theorem for rings, {gix))/{x^ — m) is a left ideal 
of {OkIvOk)[xtO-]/{x'^ — u). Since skew polynomials of degree less than n are 
canonical representatives, the elements of the ideal {g{x))/{x'^ — u) are left multiples 
of g{x) by skew polynomials of degree less than k = n — degg{x). □ 

Corollary 1. For g{x) a right divisor of x^ — u, the ideal {g{x))/{x^ — u) is an 
Ok/pOk- module, isomorphic to a submodule of {OkIpOk)^- It forms a code of 
length n and of dimension k = n — deg ( 7 ( 0 ;) over OkIpOk, consisting of codewords 
a = (ao, fli,..., a„_i) that are coefficient tuples of the left multiples a{x) = oq + 
aix an-ix^~^ of g{x). This code is called a cr-constacyclic code. 
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Proof. Let g{x) be a right divisor of a;" — u in [OkIpOk)[x\ ct]. The left ideal {g{x)) 
in {Ok/pOk)[x; a] is then an Ok/ pOK-xtiodnle and by taking the quotient by the 
monic skew-polynomial x^ — u, {g{x))/{x^ —u) is a submodule of the free OkIpOk- 
module {OkIpOk)[x\ cr]/(a:" — u) of rank n. By Lemma 1, the images of the skew 
polynomials g{x),xg{x),x^~^g{x) in the quotient ring [Ok/pOk)[x\ cr]/ (x” — u) 
form a basis of g{x)/{x^ — u) as an Oif/pOif-module. We then use the Ok/pOk- 
module isomorphism 

{Ok/pOk)[x-, <j]/{x^ -u) ^ (Ok/pOkT 

n—1 

-u){Ok/pOk)[x;(j] ^ (ao,a^-i) 

i^O 

to conclude. □ 

Note that for a cr-constacyclic code C, corresponding to a left principal ideal I 
of iOK/pO k)\x\ cr]/(x" — u), if (oq, ..., On-i) € C, then a(x) = Og + aix . -|- 
an-ix"~^ € X, and xa(x) G X. Since 

xa{x) = x{ao + aix = a{ao)x + cr(ai)a:^ a{an-i)u 

we have that 

(ucr(a„_i), cr(ao),..., CT(a„_i)) S C, 
which explains the choice of the terminology “constacyclic”. 

Let us comment on the proposed definition of tr-constacyclic code. 

(1) We could also use the terminology central a-code proposed in [6] since x^ — u 
lies in the center of {Ok/ pO k)[x', cr\. 

(2) A cyclic code would correspond to the case u = l. 

(3) This definition could be made more general by considering another suitable 
polynomial than x" — u, which would yield a complete generalization of the 
definition of a-code proposed in [6]. This is not done here, simply because 
the polynomial is given by the cyclic algebra structure, but this could be 
an interesting research direction of its own. 

(4) Finally, we may (and do) restrict our study of a-constacyclic codes to right 
divisors g{x) of x" — u that are monic : indeed, if g{x) has leading coeffi¬ 
cient a, it is necessarily invertible (since g{x) is a divisor of x” — u) and the 
constacyclic codes derived from g{x) and a~^g{x) are equal. 

The next result describes a parity check polynomial. 

k-l 

Proposition 1. Set h{x) = Y/ hix'’ x^. If h{x)g{x) = x" — u, then 

i=0 

g{x)h{x) = x” — M. 

Furthermore, let C be the code generated by g(x). Let a € {Ok/pOk)'^ and let 
a(x) be its corresponding polynomial. Then a is a codeword of C if and only if 
a{x)h{x) = 0 m (Oif/pOif)[x;cr]/(x" — u). 

Proof. Since x" — u is central, 

h{x)g{x)h{x) = (x" — u)h{x) = /i(x)(x” — u) = h{x)h{x)g{x) 


and 


h{x)[ 9 {x)h{x) - h{x)g{x)] = 0. 
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The first claim follows from the fact that h{x) is monic and thus not a zero divisor. 
If a G C then a(x) = b{x)g[x) and using the first claim 

a{x)h(x) = b[x)g{x)h(x) = 0 mod x” — u. 

Conversely, if a{x)h{x) = 0, then for some b{x), a{x)h{x) = b{x){x"‘ — u) = 
b{x)g{x)h(x). Since h{x) is monic and thus not a zero divisor, a{x) = b(x)g(x) 
as needed. □ 

3.3. A Construction A. Using the isomorphism ip defined in Section 2, for every 
left ideal I of A, we consider the cr-code C = ip{I/pA) over F,. 

A lattice of dimension N is here a discrete additive subgroup of of rank N 
as a Z-module. 

We set the map : 

p : A -)■ ip{A/pA) = Fg[a;;cr]/(a;” - u), 
compositum of the canonical projection A —>■ A/p A with ip. Then 

L = p-i(C) =I 

is a lattice in R'^, that is a Z-module of rank A = : Q] since Ok is a Z-module 

of rank n[F : Q]. 

From this point of view, the above construction may be interpreted as a varia¬ 
tion of Construction A [ 1 ], which consists of obtaining a lattice from a linear code 
over a finite field (ring), as shortly described in the introduction. This is also a 
generalization of the lattice construction of [11], defined over number fields. 

3.4. Examples. Let K = Q{i) and F = Q. Then Op = Z and Ok = Z[i]. Let 0 
be the quaternion division algebra defined by 

0 = Q(«) © Qii)e, 

with = —1. Since Nk/f{o. + ib) = a'^ + 6 ^, a,b gZ, —1 cannot be a norm and 0 
is indeed a quaternion division algebra. We set A = Z[i] 0 Z[i]e. 

We provide different examples based on primes with different ramification. 

Example 1. Set p = 3, which remains inert in Q{i). Hence, Z[i]/3Z[i] ~ Fg and 
A/3A ~ Fg 0 Fge. Take I = (1 © i © e)A. Then I contains 3 since the norm of 
1 © 7 © e is N{1 ©i©e) = (l© 7 © e)(l — i — e) = 3. Let a denote a primitive root 
of Fg over F3, satisfying © 1 = 0 and note that cr becomes the generator of the 
Galois group of Fg/Fa, a{a) = a^. We have 

ip{{l + i + e)mod3) = 1 © a © x, 
which is a right divisor of © 1 in Fg [a;; cr]: 

(x — 1 © a){x © 1 © a) = © cr(l © a)x © (a — l)x © (a © l)(a — 1) = x^ © 1 . 

Therefore, the left ideal (x © 1 © a)Fg[x; cr]/(x^ © 1) consisting of the left multiples 
of X © 1 © cr modulo x^ © 1 is a cr-constacyclic code of length n = 2 and dimension 
k = n — degp(x) = 1. Left multiples of x © 1 © a modulo x^ © 1 are explicitly given 
by {bo © 6 ix)(x © a © 1 ) = [&o(q: © 1 ) — 61] © [bo © 6 i(l — a)]x and codewords are of 
the form 

(oq, Oi) = {{a © l)ai, fli), oi G Fg. 

Taking the pre-image by ip, it corresponds to the left-ideal I/3A, with I = (1 © i © 
e)A. 
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Example 2. Set p = 5, which splits in Q(j), namely (5) = (1 + 2i){l — 2i). Then 
Z[i]/5Z[i] ~ Z[z]/(l + 2i)xZ[i]/(l —2i) ~ F 5 XF 5 and A ~ (F 5 xF 5 ) 0 (F 5 xF 5 )e. The 
first isomorphism comes from the Chinese Remainder Theorem, since (1 — 2i) and 
(1 + 2z) are coprime. An element of Z[i] is mapped to F 5 x F 5 via the composition of 
the natural projection and the above isomorphism by tt : a+ib i-A (a+26 mod 5, a+ 
36 mod 5). Since Tr{{a + ib){c + di)) = '!T{ac—bd + i{ad + bc)) = {ac—bd + 2(ad+bc) 
mod 5,ac — 6 d + 3(ad + 6 c) mod 5) while 7 r(a + i 6 ) 7 r(c + (iz) = (a + 26 mod5,a + 36 
mod 5)(c+2c? mod5,c+3d mod 5) = {ac+2ad+2cb—bd mod 5, ac+3ac?+36c—6d 
mod 5), and Tr{a+ib+c+id) = a+c+2{b+d) = a+2b+c+2d = Tr{a+ib) + n{c+id), 
TT is indeed a ring homomorphism. Note that a becomes 17 ( 0 ,6) = ( 6 , a), which fixes 
elements of the form (a, a), a G F 5 . Take I = (1 + 2e)A, which contains 5 since the 
norm of I is A^(l + 2e) = (1 + 2e)(l — 2e) = 5. Then 

'0((1 + 2e)mod5) = (1,1) + (2, 2)a;, 
which is a divisor of + 1 , since 

((1,1) + (2, 2)a^)((l, 1) - (2,2)a^) = (1,1) - (2, 2)x + (2, 2)x + (1, l)x\ 

Then the left ideal ((1, l) + ( 2 , 2)x)(F5 xFsjja;; fT]/(a;^+l) forms a cr-constacyclic code 
of length n = 2 and k = 1 . Codewords are of the form [(60, 61) + (cq, Ci)a;][(l, 1) + 
( 2 , 2 )a;] or equivalently, [(60,61) + (cq, Ci)x] [( 3 , 3 ) + (1, l)a;] = [( 36 o, 36 i) - (cq, Ci)] + 
[(60,61) + ( 3 co, 3 ci)]a;, that is 

(3a, a), a = (uq, ai) G F 5 x F 5 . 

Again, taking the pre-image by it corresponds to the left-ideal XjbK, with X = 
{l + 2e)K. 

Example 3. Set p = 2, which is ramified in Q(f): (2) = (l-|-i)^. Then Z[i]/2Z[i] ~ 
F 2 -|-t'F 2 = {0, l,u,u-|-l} with = 0, and A/2A ~ (F 2 -l-uF 2 ) 0 (F 2 -|-t'F 2 )e. In this 
case, the natural projection tt from Z[f] to F 2 + UF 2 is given by tt : a 0 f 6 1 —>■ (a 0 6 ) 
mod 20u(6 mod 2). We check that tt is a ring homomorphism: 7 r((a 0 i 6 )(c 0 di)) = 
7r(ac — 6 d 0 i{ad 0 6 c)) = (ac 0 6 d 0 ad 0 6 c mod 2) 0 v{ad 0 6 c mod 2) while 
7r(a0*6)7r(c0df) = ((a06 mod 2)0u(6 mod 2))((c0d mod 2) + v{d mod 2)) = 
(a 06 )(c 0 d) mod 20 (a 06 )dr; 06 (c 0 d)u = (ac 06 d 0 ad 06 c) 0 z;(ad 06 c) mod 2 , 
as needed, and 7r(a0i60c0id) = a0c0 60d0u(60d) = a060u60c0d0ud = 
7 r(a 0 ib) + tt{c + id). Moreover, since p = 2 totally ramifies in Z[z], a becomes 
the identity map. Take I = (1 0 e)A, which contains 2 since the norm of X is 
iV(l + e) = (1 0 e)(l - e) = 2. Then 

'(/'((I 0 e)mod 2 ) = 1 0 a;, 

which is a divisor of 0 1 = (a; 0 l)(a; 0 1). As in the previous cases, the left ideal 
(1 0 x)(F 2 0 v¥ 2 )[x\(j]/{x^ 0 1 ) forms a cr-constacyclic code of length n = 2 and 
k = 1. Codewords are of the form (60 0 6 ia;)(l 0 a;), that is we get the repetition 
code 

(ao,ai) = (ao,ao), aoGF 2 0 uF 2 . 

As above, taking the pre-image by it corresponds to the left-ideal X/2A, with 
X= (l 0 e)A. 


4. Dual Codes and Lattices 

Having defined constacyclic codes over (OkI‘90k)\x\'j\I— u), it is natural 
to wonder about the dual of such codes. 
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4.1. Dual Codes. We consider the following Euclidean scalar product in {OkI'^OkY^'- 

n 

{y,z) =^y,Zi. 

Definition 4.1. For an (n, k) code C, its Euclidean dual code is given by 

= {y, (c, y) = 0 for all c G C}. 

An (n, k) code C is said to be Euclidean self-dual if C is equal to its Euclidean dual. 

It is probably helpful to recall how the generator polynomial of a cyclic code over 
a finite field is computed. Take h{x) its parity check polynomial, with degree d and 
constant term ho, and compute x'^h{x~Y ■ The procedure in the case of interest 
here is somewhat similar, except for one difficulty: we need to give a meaning to 
h{x~Y in the non-commutative case, which is classically done through localization 
(as also done in [8]). It is known [12, Thm II.2.4] that given a ring R, li S G1 R 
is a right Ore set, then there is a ring RS~^ of right fractions and an injective 
ring homomorphism R —>■ RS~^ such that (a) the image of every element r G R 
is invertible in RS~^, and (b) every element of RS~^ can be written as a product 
rs~^. 

Proposition 2. Consider the ring [Ok/ pO k)[x\ o'] as above, and take S to be S = 
{x*, J > 0}. Then S is a right Ore set, and the right localization {Ok/pOk)\x', cr]S'“^ 
exists. Furthermore, the subring A = /pOk)[x', a-]S~^, with 

multiplication ax~^ = x~^cr(a) is isomorphic to the ring {OkIpOk)[x~^ 

Proof. By definition of Ore set [12, Def. II.2.3], we need to check the following three 
conditions: 

(1) 5 is closed under multiplication, and I € S'. 

(2) For any s G S, s is not a left or right zero divisor. 

(3) Right Ore condition: for sd\ r G R and s G S, there exist ri G R and 
Si € S such that sri = rsi. Take s = a;* G S for some i, and r = 
r{x) = Y^f^Qfix’' G OK/pOK[x;cr]. We need to show that there exists 
ri = ri(x) such that xVi(a:) = r{x)x^ for some xF Pick j > i and ri{x) = 

Then 

d d 

x^ 'Y2 cr~^{ri)x^^'‘~'^ = ^ rix^^^ = ri{x)x^ 

1=0 1=0 

as needed to show the existence of the localization {Ok/ pO k)[x] cf]S~^. 

Next, consider the map 

d d 

9 : {OkIpOk)[x\ cr] a, ^ Oix"^ ^ ^ x~'‘ai. 

Z —0 2—0 

We have, assuming without loss of generality that t > d and = ... = at = 0, 
that 

d t t d t 

aix" + ^ bixY = 9(^{ai + bi)xY = 9{'^ OiX*) -f 9{'^ bix") 

2=0 2=0 2=0 2=0 2 = 0 
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and 


d t 

9(y^a^x’’y^b^x^) 

i—0 i—0 


k —0 i-\-j—k I 

d-\-t / \ 

k —0 \i-\-j—k I 

d+t 

Y x~^x~"a\bj)ai 

A:=0 i-\-j—k 
d+t 

Y Y 

k —0 i-\-j=k 

t d 

e{Y hx'')9(Y O'ixO- 

i —0 2=0 


It follows that 9 is an anti-isomorphism of rings. 


□ 


Based on the above proposition, it is now possible to extend the computation 
of the generator polynomial from the commutative to the non-commutative case. 
Recall that we may assume the generator polynomial g{x) to be monic, without loss 
of generality. 


Proposition 3. Consider a code with generator g{x) and parity check polynomial 
h{x) = 'YiZo hix'^ + x^, that is g{x), h{x) satisfy h{x)g{x) = x^ — u. Suppose that 
= 1. The Euclidean dual g^ {x)/(x'^—u) of the a-constacyclic code {g{x))/{x'^—u) 
is a a-constacyclic code whose generator polynomial is given by 

k 

g-^{x) = ^ + Y ^\hk-i)x\ 

2=1 

or equivalently by the monic polynomial —ug'^{x). 


Proof. To show that g^ (cc) / (x” — u) is a cr-constacyclic code, we need to show that 
g^{x) is a right divisor of x" — u. We know that g{x) is, namely there exists a 
polynomial h{x) such that 

g{x)h{x) = h(x)g(x) = x^ — u. 


Then, using the anti-isomorphism 9 : {Ok/k)[x] a] — A, i-A- x ^ai 

of the previous proposition: 


x'^9(h(x))9(g(x))x’^-^ 


x^9(g(x)h(x))x’^-'^ 
x'^9(x^ - u}x^-^ 
x'=(x-" - u)x’^-^ 

1 — Mx" = —m(x" — —) = —u(x" — m), 
u 


since = 1. Therefore x^9{h{x)) is a left divisor of x” — u, and 


x’^9{h{x)) 


k-l fc-l fe-l 

= x^ 9(Y^ hiX^ -\- x^) = x^iY^ x~^hi x~^) = Y^ a’'{hi)x'^~^ 1. 

2=0 2=0 2=0 
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By the first part of Proposition 1, x^9{h{x)) is also a right divisor of x" — u. Now 
that we have shown that g^{x) is indeed a cr-constacyclic code, we are left to show 
that it is the dual of C. 

Let a{x) = Yl^=o polynomial corresponding to the codeword a = 

(oq, oi,..., On-i). Then we denote, for any 0 < I < n — k — 1, hy di{x) the 
polynomial x^g-^{x), which corresponds to the codeword : 

di = (Oixi,cr'(hfc),cr'+^(hfc_i),... ,cr'+''(ho),Oix(n-fc-;+i)), / = 0, - 1. 

Hence, a is orthogonal to the n — k vectors di {0 < I < n — k — 1): indeed, note 
that 

l+k 

dia^ = y^^aia\hi+k-i) 

i—l 

which turns out to be the coefficient of x^'^^ in a{x)h{x), I = 0,... ,n — k — 1. Since 
degh(a:) = k, deg{a{x)h{x)) < n + k, say a{x)h{x) = p{x) = ^ which 

means that modulo a:” — u, 

n—1 n+fc—1 n—1 k—1 

a{x)h{x) = '^Pix'' + ^ piX^ = y^ pix'’ + y^^Pj+nX^ j-u). 

i—0 i—n i—0 j—0 

Moreover, since a £ C, by Proposition 1, we have a{x)h(x) = 0 modulo a;" — u, 
implying that the coefficients of a:^+*, I = 0,... ,n — k — 1, are equal to zero. This 
proves the orthogonality of di with respect to a. 

Therefore, the Oif/pOif-module generated by the codewords d; {0 < I < n—k—1) 
is contained in C"*". 

We now show that the module Oif/pOif [do, ■■■,dn-k-i] has rank n — k. Indeed, 

n—k—1 

let Ao,..., A„_fe_i G Ok/pOk such that ^ Ajd; = 0. The first coordinate of 

;=o 

n—k—1 n—k—1 

^ Aid; is Aodfc = Aq, so Ao =0. Then ^ Xidi = 0 and by the same argument, 
1=0 1=1 
we prove successively that Ai = 0, ..., Xn-k-i = 0. This proves that the n — k 
vectors dp,..., dn-k-i are linearly independent over Ok/pOk- D 

We remark that in our context of cyclic division T’-algebras, u is restricted to F, 
therefore the polynomial x" — m £ {Ok/ pO k)[x', t] actually has a constant term u 
which belongs to Of/pOf- Therefore the condition = 1 means that u is of order 
2 in a finite field, that is u = ±1. This is however not the case more generally. 

Example 4. Let us continue Example 1. We have -I- 1 = (x -I- a -I- l)(x -I- a — 1) 
therefore the parity check polynomial is h{x) = x + a — 1. From Proposition 
3, we have that g^{x) = 1-1- a{ho)x = 1-1- a{a — l)x = 1 — (a -|- l)x. Now 
left multiple of g^{x) modulo x^ -I- 1 are of the form {bo + bix){x — {a + 1)) = 
[6o — bi{a— 1)] -I- [6o(—a — 1) -b &i]x, so that codewords are 

(ao, ai) = (oo, {-a - l)ao). 

These codewords clearly form the dual code of C, since ((op, {—a — l)ao), y) = 0 for 
all y £ C. 

Example 5. For Example 2, we have ((1,1) -|- (2, 2)x)((l, 1) — (2, 2)x) = (1,1) -|- 
(1, l)x^ or equivalently ((3,3) + (1, l)x)((2, 2) — (4,4)x) = (1,1) + (l,l)x^ with 
parity check polynomial h{x) = (2, 2) + (1, l)x. From Proposition 3, we have that 
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= l+a{ho)x = l + tT((2, 2))x = l + (2, 2)x. Now left multiple of modulo 
+ 1 are of the form {bo + bix){l + ( 2 , 2 )x) = [ 6 o — bi{2,2)] + [ 6 o( 2 , 2 ) + bi]x, so 
that codewords are 

(oq, fli) = (oo, (2, 2)ao), oq G F 5 X F 5 , 

which form the dual code of C, since ((ao, {2,2)ao),y) = 0 for all y € C. This also 
shows that C is self-dual. 

Finally we provide another example of self-dual code. 

Example 6. Let K = Q(-\/2) and F = Q. Then Op and Ok = Z[\/2]. Let 0 
be the quaternion division algebra defined by 

0 = Q(V2) 0 Q(y2)e, 

with = —5. Since Nk/f{^ + V^b) = + 2b^, a,b G Z, —5 cannot be a norm and 

0 is indeed a quaternion division algebra. We set A = Z[y/2] 0 Z[-\/2]e. 

Set p = 3, which remains inert in Q(-\/2). Hence, Z[-\/2]/3Z[i] ~ Fg and A/3A ~ 
Fg 0 Fge. Take I = (v^ + e)A. Then I contains 3 since the norm of 0 e is 
N(-\/2 0 e) = (\/2 0 e)(—\/2 — e) = 3. Let a denote a primitive root of Fg over F 3 , 
satisfying 0 1 = 0 and as before, a{a) = . We have 

'0((-\/2 0 e)mod3) = a 0 a;, 
which is a right divisor of 0 5 = 0 2 in Fg [a;; cr]: 

{x 0 o.){x 0 a) = 0 a{a)x 0 {a)x + = x^ + 2. 

Therefore, the left ideal {x 0 a)Fg[x; cr]/(x^ 0 2) is a cr-constacyclic code of length 
n = 2 and dimension 1. Left multiples of x 0 a modulo 0 2 are explicitly given 
by (bo 0 bix){x 0 a) = [ 60 (a) 0 61 ] 0 [60 0 6 i(—a)]x and codewords are of the form 

(ao,ai) = (aai,ai), oi G Fg. 

This code is self-dual, since u = 2 satisfies = 1 and ( 7 '*‘(x) = l 0 tT(a)x = 1 —ax = 
—a(a 0 x). Taking the pre-image by ip, it corresponds to the left-ideal I/3A, with 
1= (v^ 0 e)A. 

4.2. Lattices from Dual Codes. Recall the proposed variation of Construction 
A. Given the map 

p : A ip{A/pA) = Fq[x; tr]/(x" - u), 

compositum of the canonical projection A —>■ A/p A with ip, we obtained a lattice L 
given by 

L = p-i(C) = 1 . 

Now let be the dual of C. Then 

L'=p-i(G) 

is also a lattice. 

Example 7. Let us continue Examples 1 and 4. To the code C given by the left 
multiples of (x 0 1 0 a) mod x^ 0 1 corresponds the lattice p~^{C) = (1 0 i 0 e)A. 
The dual lattice C"*- is generated by the left multiples of 1 — (a 0 l)x mod x^ 0 1 
to which corresponds the lattice = (1 — (i 0 l)e)A. 

We make an obvious observation. 

Lemma 4.2. IfC C C'^, we have the inclusion L C L'. 
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Proof. Let x € L. Then p{x) G C, so p(x) S C-^ and x € L'. 


□ 


5. Application to Space-time Codes 

We conclude by discussing our motivation to look at the question of defining 
a variation of Construction A over a cyclic division T’-algebra, which comes from 
space-time coding. 


5.1. Space-Time Coding. Cyclic division algebras are by now classically used to 
design space-time codes [13, 14]. Unlike in classical coding theory where codewords 
are typically vectors with coefficients over finite fields (or finite rings), in the context 
of space-time coding, codewords are matrices with coefficients coming from number 
fields, and matrix codewords are obtained as follows. To make the notation easier, 
we assume for the rest of this section that u G Op- To any element a = ao + aie + 
• • • -I- an-ie""^ of A, we can associate a matrix in Matn{OK) (since u G Op) by : 



Oq 

ua(a„-i) ucr^(a„_ 2 ) •• 

wcr” ^(ai) 


Oi 

cr(ao) u(7^(a„_i) •• 

M(T"“^(a2) 

M(a) = 



MtT"“^(a„_i) 


Pn—l 

cr(a„_2) cr^(a„_3) •• 

cr”“i(ao) 

The map 


A — y Mctt-n, ) 

a 1 —^ M(a) 



is an Oif-algebra injective homomorphism. A space-time code is thus given by 
{M(a), a G A}. The condition that the F-algebra is division is critical, it fulfills 
one design criterion for space-time codes, namely that det(M(a) — M{a')) 0, 

a a'. 

We illustrate this by continuing Example 1. 


Example 8. For q = 

algebra £3, a,b G Z[i] 


a + be in the natural order Z[i] 0 Z[i]e of the quaternion 


M{q) 


a 

b 


-b 

a 


where • is the non-trivial Galois automorphism of Q(f)/Q. Let t = {a + be){l + i + e) 
be an element of I = A(1 + i + e) (with a,b G Z[f]). Then 


t = a(l + i) — 6 + (a + 5(1 — i))e. 


Hence, 


M{t) 


a(l + i) — 5 
a + 5(1 — i) 


and we obtain the space-time code 


-(a + 5(1 + i)) 
a(l — i) — b 


f a(l+i) — b —(a+ 5(1 + *)) 
\ a + 5(1 — *) a(l —*) —5 


a, 5 £ Z[*] 


Note that X = p ^(C) is a real lattice with rank 4. 
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5.2. Coset Coding. Let now v = {vi,, Vn) be an information vector containing 
the data to be transmitted, which should be mapped to a lattice point in L, where 
L is used as a lattice code. Mapping a vector with coefficients in a finite ring to a 
lattice point is not an easy task, and can be facilitated by the use of Construction 
A. The lattice L = p~^(C) = IK may by construction be written as a union of 
cosets of pA, where each coset representative may be chosen to be a codeword in 
the code C. Namely, if g{x) is a right divisor of x” — u and if a cr-constacyclic code 
C = (g(ai))/(x" — It) C {Ok/ pOK)[x\cr]/{x'^ — u) has dimension k = n — deg((?), 
since 

A/pA = {OK/pOK)[x]a]/{x^ - u) 

there is an isomorphism 

X/pK'^C. 

This allows us to associate in a unique way a coset of pA to a codeword. The 
mapping from u to a point in L may be done by attributing some information 
coefficients ui,..., Ufe to be encoded using the code C, and the rest of the information 
coefficients to be mapped to a point in the lattice pA. This simplifies the encoding 
in the cases where pA is a lattice “easier” to label than L, which happens in the 
original Construction A where this lattice turns out to be a scaled version of Z", 
but also in many cases where p gives rise to a lattice isomorphic to Z" (or another 
lattice whose points are easy to label). 

Irrespectively of the lattice obtained from pA, coset encoding is necessary in the 
context of wiretap codes. In a wiretap context, a code should not only provide 
reliability between a transmitter and a receiver, but also ensure confidentiality, 
should an eavesdropper try to intercept the message. To protect from wiretapping, 
information symbols are mapped to a codeword in C, while random symbols are 
picked uniformly at random in the lattice p A to create confusion at the eavesdropper. 
Wiretap space-time codes have been studied in [15], where coset encoding of space- 
time codes is assumed. However, no concrete way to do so was proposed. The 
construction of the lattice L = p“^(C) = I as presented in this work thus enables 
coset encoding for wiretap space-time codes. 

6. Future Work 

In this paper, we presented a construction of lattices from constacyclic codes 
over skew-polynomials, which can be interpreted as a variation of the well known 
Construction A of lattices from linear codes. The starting point was the quotient 
A/p A of a given order A from a cyclic division F-algebra, which is motivated by ap¬ 
plications of such algebras to space-time coding. Natural future research directions 
include: 

• To continue the study of constacyclic codes over {Ok/pOk)[x] o']/(a:” — it), 
in particular by replacing the polynomial a;" — it with a more general poly¬ 
nomial f{x). This may include looking at the characterization of self-dual 
codes. One could alternatively consider duality with respect to a Hermitian 
inner product. 

• Linking the properties of the constacyclic code C to that of the lattice 
L = /3“^(C): there are standard duality results for the classical Construction 
A, relating the dual lattice of L* with L', or the weight enumerator of the 
code with the theta series of the lattice, which have not yet been considered. 
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This leads to further properties of lattices that could be explored, such as 
extremality and modularity. 

• Design of wiretap space-time codes: this consists of choosing the cyclic 
division _F-algebra A, the corresponding two-sided ideal X and constacyclic 
code C, to optimize the confusion at the eavesdropper. 
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